diff options
| author | Daniil Baturin <daniil@baturin.org> | 2021-06-05 17:58:50 +0200 |
|---|---|---|
| committer | Daniil Baturin <daniil@baturin.org> | 2021-06-05 17:58:50 +0200 |
| commit | dcbd8a1f42b60f74b2d118b5d56c7d9bedabc84e (patch) | |
| tree | 91e69d1cfb3550de6357fe2f499cfd2a081006ca /scripts/live-build-config | |
| parent | 06dc2469cc4c42a579a44e985d8099fc399f9c7b (diff) | |
| download | vyos-build-dcbd8a1f42b60f74b2d118b5d56c7d9bedabc84e.tar.gz vyos-build-dcbd8a1f42b60f74b2d118b5d56c7d9bedabc84e.zip | |
Update the Saltstack repo URL and disable HTTPS cert verification.
Jessie lacks a CA or intermediate cert for the Amazon cert that Saltstack is now using,
so build fails because the cert looks untrusted.
Since APT will always verify GPG signatures, server authentication
is redundant and disabling it doesn't create a security issue.
Diffstat (limited to 'scripts/live-build-config')
| -rwxr-xr-x | scripts/live-build-config | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/scripts/live-build-config b/scripts/live-build-config index 4fedfeb1..aad076b0 100755 --- a/scripts/live-build-config +++ b/scripts/live-build-config @@ -58,7 +58,8 @@ lb config noauto \ --updates false \ --security true \ --apt-options "--yes -oAcquire::Check-Valid-Until=false -oDebug::BuildDeps=true -oDebug::pkgDepCache::AutoInstall=true \ - -oDebug::pkgDepCache::Marker=true -oDebug::pkgProblemResolver=true -oDebug::Acquire::gpgv=true" \ + -oDebug::pkgDepCache::Marker=true -oDebug::pkgProblemResolver=true -oDebug::Acquire::gpgv=true \ + -o Acquire::https::Verify-Peer=false" \ --apt-indices false "${@}" """ |